Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/592ada37-6a1a-3e52-b44a-0cc3bf0f61f2.roa
File:                     592ada37-6a1a-3e52-b44a-0cc3bf0f61f2.roa (raw, json)
Hash identifier:          SYEmYaNcGiwFyH42j1mkeGXYy3PeKeveHeVQ3D5gTmI=
Subject key identifier:   0F:35:56:CA:1C:0A:7C:8C:FB:43:B7:FD:F1:71:CF:61:5D:47:5A:69
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328576D51CC73C042CFC1710E11981B
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/592ada37-6a1a-3e52-b44a-0cc3bf0f61f2.roa
Signing time:             Tue 24 Mar 2020 19:42:46 +0000
ROA not before:           Tue 20 Nov 2012 05:00:00 +0000
ROA not after:            Mon 27 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        165.225.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:0e:11:98:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov 20 05:00:00 2012 GMT
            Not After : Jun 27 04:00:00 2022 GMT
        Subject: CN=a0a426c9-d1e9-4cbd-9632-92527c4191b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:a4:6f:72:32:05:8c:3b:3d:da:43:8d:1a:
                    70:dc:58:41:1e:a0:2d:57:bc:5c:0b:b2:92:a4:3b:
                    c1:ed:e0:95:c3:bd:30:32:2c:22:1d:21:c3:70:10:
                    d8:96:1a:20:74:c9:b6:c6:e0:03:ad:bd:e9:7c:31:
                    55:52:5c:38:ff:5f:38:03:62:b4:20:a7:07:bd:d3:
                    48:9d:c1:9b:7c:4b:59:36:ae:96:eb:6f:4b:01:a7:
                    57:e3:ca:5f:7d:d6:29:f7:16:f6:4f:4a:18:dc:4f:
                    cf:1e:69:3b:aa:07:16:6b:3e:0a:38:e7:e2:cd:75:
                    88:4f:b8:aa:cf:61:c5:ee:4b:b8:5d:35:84:98:13:
                    d3:c7:b1:c2:ba:32:b6:de:b7:c5:89:36:5f:54:57:
                    65:6d:a5:77:0b:fe:8b:8c:a8:05:b6:9a:b8:f7:ae:
                    2b:34:ae:42:59:14:86:90:22:5a:d4:31:e4:a1:d9:
                    7f:83:40:3e:79:f8:e4:58:8e:cc:d4:a9:93:46:54:
                    fe:1e:fd:47:bb:e6:16:cf:b7:0b:1e:a4:af:22:c6:
                    61:3b:be:43:c7:e6:6a:b8:c4:60:92:21:10:87:9d:
                    53:97:f9:b0:77:03:48:86:42:70:ad:55:92:c4:44:
                    ce:72:27:07:fb:1b:d2:e9:f6:85:d6:1a:c7:cf:e3:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:35:56:CA:1C:0A:7C:8C:FB:43:B7:FD:F1:71:CF:61:5D:47:5A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/592ada37-6a1a-3e52-b44a-0cc3bf0f61f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:da:22:ba:13:21:3c:55:29:66:87:73:ac:81:4f:4b:06:
         ad:7f:65:f8:62:57:fd:6b:ca:cc:f3:4f:68:ff:be:d8:ef:54:
         92:1d:46:f9:f9:c8:c9:76:3a:3e:77:92:bd:62:05:c2:d6:a9:
         41:7a:d4:0b:1e:fb:5a:93:17:e4:bf:d4:8f:ab:63:ef:47:57:
         fc:d0:6f:05:dc:d2:11:fc:cc:96:aa:bd:53:23:2d:40:87:a8:
         2d:5a:b2:f4:95:22:f7:f4:ee:44:f9:db:89:df:1f:9d:ff:96:
         b8:6d:94:11:be:99:ca:61:71:d8:c4:f1:3d:8b:2b:f4:ec:02:
         ea:38:52:79:5c:ec:19:0e:26:be:74:fe:75:fd:50:4d:93:0c:
         93:a5:4b:48:c5:8e:8a:65:15:eb:f0:09:fd:35:68:6b:50:71:
         51:88:67:7d:fb:62:30:a2:c2:15:dc:56:9f:33:24:4d:e5:7c:
         2e:fa:23:97:b5:6a:45:21:f6:1d:9b:c7:6e:1d:9f:38:01:d0:
         4d:39:59:7a:41:e3:6d:5d:ea:29:51:71:8c:ce:ad:68:7d:7e:
         d6:b8:c9:b3:e7:94:8a:c4:51:2c:65:65:62:5b:8b:24:f9:a3:
         2e:c8:0d:ab:e2:d2:03:93:c1:f2:92:f4:5b:ae:37:c2:eb:5e:
         7e:98:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----